Cyber-Fraud Victim or Securities Law Violator?